$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/40e3f322-a216-3c3f-b94f-271c6ddb1492.roa File: 40e3f322-a216-3c3f-b94f-271c6ddb1492.roa (raw, json) Hash identifier: V45qhc+WTB7QjWXxAGkxGejLn7lCTS5xBwsi/yfLxMc= Subject key identifier: C5:5A:3F:96:F9:C4:9E:0B:A1:9F:F4:D9:62:C5:99:C5:91:12:A3:6A Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584F4976455DDE9C85A2018FA180 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/40e3f322-a216-3c3f-b94f-271c6ddb1492.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30103 IP address blocks: 161.199.138.0/23 maxlen: 24 198.251.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:45:5d:de:9c:85:a2:01:8f:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f474bc31-2828-42ff-ad96-bb777d371d17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0f:60:95:54:d8:27:a6:85:07:63:ca:df:d4: b0:d9:7f:a6:c3:ee:2f:6f:3c:82:d5:65:42:fc:7f: 01:5d:2e:fa:00:2b:44:64:26:75:25:4f:af:da:bd: 39:f7:d6:f6:91:0e:cb:42:24:84:c2:c4:ee:29:33: 94:cc:06:7b:5d:84:8a:38:56:a5:67:1d:49:e9:7e: 76:70:bf:41:7c:40:dd:89:83:2e:ce:79:ce:f4:00: f3:22:01:ec:d7:48:4c:9a:20:4b:83:af:3b:37:f1: 86:e5:c2:95:fa:83:cb:1a:5f:e4:2b:11:9a:b5:c9: 2f:89:31:38:81:4f:b9:83:48:c8:3d:17:c6:d9:13: a3:fd:22:03:95:7e:36:00:f6:86:f7:bc:65:39:5b: 06:b3:9a:d0:c5:bc:e9:55:31:3e:8a:66:bb:95:94: 32:0d:f3:b0:18:39:db:1b:78:e3:b2:51:9f:56:d5: b5:51:1e:90:34:af:05:b2:22:08:12:ce:91:2e:8c: d3:8d:6f:ab:90:c2:39:ff:3c:40:31:d7:c8:25:8b: 79:43:88:18:e1:ec:a5:ff:dd:1e:ed:de:7a:49:d0: c2:1e:59:e7:98:2f:76:54:2e:2e:c3:b0:a8:09:e3: 9f:1c:fb:15:90:8c:ed:7b:06:75:78:95:7e:22:b2: e2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:5A:3F:96:F9:C4:9E:0B:A1:9F:F4:D9:62:C5:99:C5:91:12:A3:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/40e3f322-a216-3c3f-b94f-271c6ddb1492.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 161.199.138.0/23 198.251.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:22:13:1f:2e:3f:61:81:eb:ec:ba:ef:82:96:f1:cf:66:35: b9:d7:3b:88:c1:c9:02:b4:f8:1c:ea:ea:73:2e:84:82:4b:c0: fd:a1:27:6f:b1:b5:cb:73:6e:89:0b:2d:26:ec:e5:98:61:d0: 32:29:a6:18:df:48:f9:0d:94:6f:c6:75:f8:59:c0:9d:25:38: d7:dc:d1:a0:f3:75:50:17:32:cd:62:64:7c:f8:09:63:9b:35: 6f:09:e2:ae:55:b5:b5:2c:ef:24:71:d8:cc:c0:3f:ed:15:b1: cb:df:57:5c:c3:46:25:48:7d:ac:8b:74:6f:1f:cb:91:aa:e9: 49:11:69:61:97:42:7c:4e:f6:59:09:64:ef:c1:59:04:06:81: e0:35:49:60:9f:97:a8:ac:0f:4e:fd:a5:44:52:95:02:a9:1b: a4:3c:72:45:c1:06:59:06:35:91:53:21:90:c0:46:67:61:31: a4:e4:1e:12:da:91:30:ae:3e:a4:46:78:66:04:63:ea:5d:72: 16:65:96:a9:29:0c:44:fd:7c:ac:89:a0:ec:f0:93:65:16:60: 88:8e:7f:a2:9e:a2:05:41:60:d0:e5:ae:d1:a4:8b:5e:c3:0d: 5b:db:7e:f0:cd:ff:d0:89:3e:68:c9:67:5b:1c:19:91:6f:96: 60:5d:14:61 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9JdkVd3pyFogGPoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjQ3NGJjMzEtMjgyOC00MmZmLWFkOTYtYmI3NzdkMzcxZDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmA9glVTYJ6aFB2PK39Sw2X+mw+4vbzyC1WVC /H8BXS76ACtEZCZ1JU+v2r0599b2kQ7LQiSEwsTuKTOUzAZ7XYSKOFalZx1J6X52 cL9BfEDdiYMuznnO9ADzIgHs10hMmiBLg687N/GG5cKV+oPLGl/kKxGatckviTE4 gU+5g0jIPRfG2ROj/SIDlX42APaG97xlOVsGs5rQxbzpVTE+ima7lZQyDfOwGDnb G3jjslGfVtW1UR6QNK8FsiIIEs6RLozTjW+rkMI5/zxAMdfIJYt5Q4gY4eyl/90e 7d56SdDCHlnnmC92VC4uw7CoCeOfHPsVkIztewZ1eJV+IrLiewIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMVaP5b5xJ4LoZ/02WLFmcWREqNqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvNDBlM2YzMjItYTIxNi0z YzNmLWI5NGYtMjcxYzZkZGIxNDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBoceKAwQD xvv4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIwiEx8uP2GB6+y674KW8c9mNbnXO4jByQK0+Bzq6nMuhIJL wP2hJ2+xtctzbokLLSbs5Zhh0DIpphjfSPkNlG/GdfhZwJ0lONfc0aDzdVAXMs1i ZHz4CWObNW8J4q5VtbUs7yRx2MzAP+0VscvfV1zDRiVIfayLdG8fy5Gq6UkRaWGX QnxO9lkJZO/BWQQGgeA1SWCfl6isD079pURSlQKpG6Q8ckXBBlkGNZFTIZDARmdh MaTkHhLakTCuPqRGeGYEY+pdchZllqkpDET9fKyJoOzwk2UWYIiOf6KeogVBYNDl rtGki17DDVvbfvDN/9CJPmjJZ1scGZFvlmBdFGE= -----END CERTIFICATE-----Generated at Mon Sep 28 21:44:04 2026 by rpki-client